LOW OVERHEAD ACTIVE MITIGATION OF SECURITY VULNERABILITIES BY MEMORY TAGGING

    公开(公告)号:WO2022171299A1

    公开(公告)日:2022-08-18

    申请号:PCT/EP2021/053510

    申请日:2021-02-12

    Abstract: A system including a logic component for memory management and a method for mitigation of security vulnerabilities, resulting from memory accesses offending memory allocation rules is disclosed. Pointers exceeding their allocated range are comparatively common bugs of software written in low-level languages such as assembly, C or C++. Memory allocation offending memory accesses may also be deliberate features of malware. The disclosure provided a low performance overhead method of mitigating the vulnerability type by registering indications of the context requesting a memory access, referred to as context identifiers. The indications are based on properties such as privilege level, EL, program counter value, linear address, physical address, and/or the like. When a context submits a memory accesses offending memory allocation rules it is marked as an offending context. When the offending context issues a following memory access, it may be aborted using an exception, interrupt, or a trap, minimizing the vulnerability window and the effect on other processes.

    PERFORMANCE SIMULATION OF MULTIPROCESSOR SYSTEMS
    7.
    发明申请
    PERFORMANCE SIMULATION OF MULTIPROCESSOR SYSTEMS 审中-公开
    多处理器系统的性能仿真

    公开(公告)号:WO2007040793A1

    公开(公告)日:2007-04-12

    申请号:PCT/US2006/030183

    申请日:2006-08-03

    CPC classification number: G06F11/3457 G06F17/5022

    Abstract: An embodiment of the present invention is a technique to simulate performance of a multi-core system. A micro-architecture effect is estimated from each core in the multi-core system. A model of a memory hierarchy associated with each core is simulated. The simulated model of the memory hierarchy is superpositioned on the estimated micro-architecture effect to produce a performance figure for the multi-core system.

    Abstract translation: 本发明的一个实施例是一种模拟多核系统性能的技术。 从多核系统中的每个核心估计微架构效应。 模拟与每个核心相关联的内存层次的模型。 存储器层次的模拟模型叠加在估计的微架构效应上,以产生多核系统的性能指标。

    REAL-TIME THREADING SERVICE FOR PARTITIONED MULTIPROCESSOR SYSTEMS
    9.
    发明申请
    REAL-TIME THREADING SERVICE FOR PARTITIONED MULTIPROCESSOR SYSTEMS 审中-公开
    用于分散式多处理器系统的实时打线服务

    公开(公告)号:WO2007038011A1

    公开(公告)日:2007-04-05

    申请号:PCT/US2006/035961

    申请日:2006-09-12

    CPC classification number: G06F9/4843

    Abstract: An embodiment of the present invention is a technique to provide a real-time threading service to an application in a multi-core environment. An executive is launched, within a most privilege level of an operating system (OS), on a real-time core in the multi- core environment. The real-time core is sequestered from the OS. A real-time thread is created in a least privilege level on the real-time core for an application using a library. The library is loaded by the application. The real-time thread shares a virtual address space with the application.

    Abstract translation: 本发明的实施例是一种向多核环境中的应用提供实时线程服务的技术。 在多核环境中的实时核心上,一个执行者在操作系统(OS)的最特权级别中启动。 实时核心是从操作系统中隔离出来的。 在使用库的应用程序的实时内核的最小权限级别中创建实时线程。 该库由应用程序加载。 实时线程与应用程序共享虚拟地址空间。

Patent Agency Ranking